visual-qa
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill manages its dependencies via
npm, as defined in theassets/package.jsonfile. It relies on standard libraries for browser automation and image processing, such asplaywright-core,pixelmatch, andpngjs. - [COMMAND_EXECUTION]: The skill documentation instructs the user to install dependencies and run the
route-shots.mjsdriver script. This script performs necessary file system operations, including directory creation and reading/writing image files. - [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface where the agent processes visual data (screenshots) from a web application.
- Ingestion points: Visual content from screenshots and metadata in
MANIFEST.jsonprocessed inSKILL.mdandroute-shots.mjs. - Boundary markers: Structured rubrics in
SKILL.mdand automated pixel-diffing are used to guide the agent and ensure objective review. - Capability inventory: The script has permissions to interact with the local file system and automate browser tasks on localhost.
- Sanitization: Deterministic checks for color contrast and layout consistency provide objective metrics that supplement and validate the agent's analysis.
- [DYNAMIC_EXECUTION]: The
route-shots.mjsscript usespage.evaluate()to execute theDESIGN_AUDITfunction within the web page context. This is a standard method for performing in-page analysis during browser automation and involves executing locally-defined logic.
Audit Metadata